Accepted polarssl 1.3.9-2.1+deb8u2 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 09 May 2017 09:42:21 +0100
Source: polarssl
Binary: libpolarssl-dev libpolarssl-runtime libpolarssl7
Architecture: source
Version: 1.3.9-2.1+deb8u2
Distribution: jessie
Urgency: high
Maintainer: Roland Stigge <stigge@antcom.de>
Changed-By: James Cowgill <jcowgill@debian.org>
Description:
libpolarssl-dev - lightweight crypto and SSL/TLS library
libpolarssl-runtime - lightweight crypto and SSL/TLS library
libpolarssl7 - lightweight crypto and SSL/TLS library
Closes: 857561
Changes:
polarssl (1.3.9-2.1+deb8u2) jessie; urgency=high
.
* Fix CVE-2017-2784: Freeing of memory allocated on stack when
validating a public key with a secp224k1 curve. (Closes: #857561)
Checksums-Sha1:
917394c6dc4bc3b6d52631e4966bf3dc36890852 1898 polarssl_1.3.9-2.1+deb8u2.dsc
dbdf2ef546952e9c1c163266074b3d9a579d7b8b 9600 polarssl_1.3.9-2.1+deb8u2.debian.tar.xz
affd95436ea21972e41ec193401f01591ef44f3c 5575 polarssl_1.3.9-2.1+deb8u2_source.buildinfo
Checksums-Sha256:
924b06b5bb03ab5cd9981b57fca713ff156df04b43ceb06587d6559d8265125a 1898 polarssl_1.3.9-2.1+deb8u2.dsc
3a445eb6efb0207b1d949019ee4e2ddadde6807a9d96eac724a3ba2762d2483f 9600 polarssl_1.3.9-2.1+deb8u2.debian.tar.xz
73d80573ddc8658e3d513698ee1f220667a3675f186f40827f54f4fa4dd0cc11 5575 polarssl_1.3.9-2.1+deb8u2_source.buildinfo
Files:
96673751fcb0634f400a83f587f1437d 1898 libs optional polarssl_1.3.9-2.1+deb8u2.dsc
e07fff4c09d47586fc62b4f62135dc67 9600 libs optional polarssl_1.3.9-2.1+deb8u2.debian.tar.xz
e31f53055633f37f134231a6895a84c5 5575 libs optional polarssl_1.3.9-2.1+deb8u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEE+Ixt5DaZ6POztUwQx/FnbeotAe8FAlkSz2wACgkQx/Fnbeot
Ae8EtxAArVdlR0G+bLtKcV41HP8SPziJCWRS8JzsnWsrtJzonnVx0/bp1uBO55uQ
gsmUXgHToTfEOxNgAVJw8Z5wclUkII+NPBA16RbNe6/xpyyqlZS9tZ69lRLOFRtb
so0vsd4BUgfz/4KQITN70n/rAEvbpawJPmp2XUNhmpzTvnwQiDMzuliEApyXknkh
NpBlX+rc1gHRiJZRrQ6s8Rrj/MPMx6Cn0BUFovTRLZhi4mYWVK/qnSV0Xx4/dM2R
OhuTAs1A3/X0BFNP0p3zTdLVrJBTqqolYcN9Kl5oB/EhtTBOygoV8s5TeSnaoEbr
UjBGgOcanPYPD9DPpPYJ/JTOZJGzosqbmSTJMItntTRh7Kj4FLLtySWyJTbZRWWD
z7fI0F0A3+qc/04OigIB0ggW8T9Ew4/ECn+lrrL4h1MHZIHIu8jnCtgO5Qc9Fq2R
raI9aHvBMMn7HNDmXfGsyBkc+qFm2jtnLcMyShmWU0h8X6B4iVXgL1aYZsjRyKLm
7vy/2B0wB9BLk3ZueZW9HnYeqgBFpgiMkOiAFIZE6IBFBOIqI3TBiHKOQBzo/aKB
vS7C0q3H+NPzcFJN1xvaqlYA3ykaSIHEEB72l0l2T8i3SKeHEzO57AfuQClKjZ/a
pddjgOT8ZG/TMmx2q07CZzRMidEG+nY6PO9iW02OiZochCkaP4M=
=H9Fc
-----END PGP SIGNATURE-----